Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
File: RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft (raw, json)
Hash identifier: gksUXsKhv0MUgd4MxNJyHVlrzxwGzeOJ0B+Wk452vPU=
Subject key identifier: 28:B7:44:95:55:E0:90:0C:F8:FF:35:CB:A0:04:10:51:07:92:D4:5B
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Certificate issuer: /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial: 0197B5FBCA4E0F343133A764C127F5247E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
Manifest number: 0411
Signing time: Sat 28 Jun 2025 10:01:06 +0000
Manifest this update: Sat 28 Jun 2025 10:01:06 +0000
Manifest next update: Sun 29 Jun 2025 10:01:06 +0000
Files and hashes: 1: RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl (hash: znLW0OYxgCOlaj8lGrlLoomJRgybq1tUhbskcuOSeZc=)
2: knBsZ4wjpF8zeO3oZHgDCU3JzpY.roa (hash: TYTzhZiCS0TYNybiAGDqTJecyl1aRzohizYpYrTciOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:ca:4e:0f:34:31:33:a7:64:c1:27:f5:24:7e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Validity
Not Before: Jun 28 10:01:06 2025 GMT
Not After : Jun 29 10:01:06 2025 GMT
Subject: CN=28b7449555e0900cf8ff35cba00410510792d45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:32:14:6f:8d:d4:8e:5a:ce:a5:58:ab:90:
f2:f8:ab:87:34:3d:b2:f1:70:14:a3:ca:a9:76:4b:
da:10:be:18:7e:c3:ed:64:02:31:18:c4:1a:ab:5a:
e5:e5:3d:88:b9:60:7a:99:bd:6e:98:9c:99:55:9d:
c5:79:62:5b:41:e9:68:c4:e1:c6:53:7a:09:a3:2a:
4a:02:f6:78:91:97:95:2a:9e:ed:ca:95:e1:2b:a8:
12:04:fb:8e:7a:b5:98:51:06:92:d0:0e:d1:40:23:
81:2e:36:67:9e:e6:36:9d:c7:89:28:e0:0f:c6:e1:
59:53:a6:54:b9:29:58:9e:ea:f3:8e:40:4e:61:c9:
de:ab:ff:9d:63:04:cc:d8:4d:f3:28:37:f9:2e:a0:
5d:e6:02:84:61:13:29:74:c0:68:bc:76:69:86:cc:
d9:48:a7:78:d4:ba:83:6c:5f:f8:a1:35:fa:ce:fd:
4f:7d:15:03:02:3f:39:d4:a4:00:99:8d:25:10:ad:
70:ca:d2:d6:b1:3f:b5:a0:77:a8:26:2f:50:96:ad:
88:31:8e:a3:99:fb:f1:c6:f2:0c:cb:a7:7c:f3:29:
14:61:93:da:56:7e:df:a6:ac:54:df:9b:bd:58:24:
ef:b2:7f:66:a9:71:e7:88:79:4c:f8:fc:c9:a8:03:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B7:44:95:55:E0:90:0C:F8:FF:35:CB:A0:04:10:51:07:92:D4:5B
X509v3 Authority Key Identifier:
keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:36:2b:d1:d6:0b:8d:32:df:7c:9d:59:15:5c:0b:e5:e1:35:
81:b7:76:84:4e:0e:da:61:80:ea:c2:8d:e7:d5:ad:9e:e6:48:
96:03:32:70:73:2a:4b:90:ba:1a:65:fd:43:b1:cd:41:93:54:
37:b7:00:6d:f4:92:21:1a:62:ed:46:7b:57:46:5c:03:a1:a4:
0e:91:b5:16:37:b3:e4:26:48:a6:43:db:f5:91:b7:7c:d5:b5:
3e:05:cb:b0:8a:82:f5:ee:57:22:1e:56:1b:18:f2:38:22:d7:
88:fd:91:53:f1:95:10:ee:b6:e4:ef:64:a1:47:8f:a3:fa:fa:
d2:68:7c:64:d7:72:3d:27:d9:0a:09:94:fc:5f:3a:64:c5:47:
f2:e3:94:1e:df:56:f9:a8:b4:3a:fe:94:24:14:40:0a:d8:00:
d5:36:ce:6c:4f:5d:39:49:b1:04:5b:1d:cd:d9:9e:82:fd:b6:
60:3b:5b:02:ff:46:11:8c:71:ad:0b:d9:d8:ac:f3:ed:2d:db:
f9:f8:e1:ca:7f:2b:cb:16:cc:f9:57:15:9b:a6:33:b0:47:4f:
12:a8:68:dd:15:93:6b:07:62:22:4d:d6:98:1e:64:2f:14:d7:
8c:84:b8:c4:91:f4:91:20:48:09:bf:12:52:f4:29:13:e2:99:
de:70:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:01:22 2025 by rpki-client